Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0214ae0f-b5cf-3ca3-a8fa-7c5b75ad0772.roa
File:                     0214ae0f-b5cf-3ca3-a8fa-7c5b75ad0772.roa (raw, json)
Hash identifier:          zzbsPZWLplY2zrJTtNduFA/69uAAlxqo/0T9yaRIUbo=
Subject key identifier:   0F:F3:C4:E1:19:6D:CC:15:2F:AF:37:C2:1F:AB:0D:44:4C:AF:60:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0B4591CB5F65F99065380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0214ae0f-b5cf-3ca3-a8fa-7c5b75ad0772.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        172.242.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:b4:59:1c:b5:f6:5f:99:06:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=0d348a2b-b379-4a8d-a20c-c177173aa918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:d8:22:c2:c1:32:38:d4:b8:1b:e0:b8:d2:
                    08:ea:c7:91:58:46:d2:e1:85:ca:d5:bb:9c:ed:e3:
                    58:fe:97:f8:37:a8:60:67:32:af:21:f6:04:5d:29:
                    65:c3:0a:50:95:ca:2c:b5:bb:20:00:8e:f1:73:c4:
                    93:ed:c5:7e:06:17:ca:5c:6c:04:31:29:e8:87:9f:
                    74:e7:19:02:b7:76:aa:d9:29:f6:12:e9:63:30:67:
                    94:55:35:72:89:e4:5f:8b:c6:6f:1e:2e:45:28:9f:
                    40:ba:57:85:b6:a8:ec:69:50:84:5f:c7:59:1f:8e:
                    81:a5:a8:a6:19:cb:a1:9a:3f:62:40:f3:e5:ca:be:
                    53:f0:e8:6f:c7:db:01:3f:44:19:06:c6:4f:ac:55:
                    5e:b9:a1:df:7e:a8:23:0d:28:01:f2:1a:9b:c2:07:
                    45:de:bc:2e:39:8c:e2:10:23:c4:0a:88:9f:f7:a6:
                    ce:4c:36:4e:21:5f:d6:fb:00:33:6c:37:c9:8e:2a:
                    23:73:72:ac:15:37:a5:49:90:95:37:5e:8c:70:a2:
                    79:54:5e:5f:a9:39:08:b3:b7:9d:b2:b8:f6:e3:73:
                    6b:8e:34:82:0e:e7:fe:60:5e:c1:0e:47:37:4e:b4:
                    1e:35:fc:63:b3:d9:36:14:93:75:cd:1e:5e:4d:40:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:C4:E1:19:6D:CC:15:2F:AF:37:C2:1F:AB:0D:44:4C:AF:60:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0214ae0f-b5cf-3ca3-a8fa-7c5b75ad0772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:2a:82:40:c9:27:c2:34:57:04:f6:6a:d9:88:0d:89:55:
         61:22:8a:37:53:19:21:85:1c:70:b2:c8:62:57:f4:94:78:6e:
         0e:4e:7a:03:3c:e4:89:4d:46:4b:02:2e:4b:63:18:2a:5d:f0:
         0b:df:ac:11:70:2a:69:27:cc:05:7f:45:e3:d9:af:0c:46:18:
         61:82:d1:2d:4d:42:21:c9:a3:c1:dd:de:6d:11:56:e2:22:8c:
         c2:4e:12:70:5f:74:d3:55:1b:57:1f:c5:d0:38:fe:a0:1e:60:
         09:0c:50:7b:b6:22:7b:0e:48:43:c0:45:ff:65:af:b8:9a:99:
         5c:d7:47:6c:13:84:c5:31:66:40:7e:2e:56:28:bc:d0:1c:43:
         66:9c:81:38:38:04:ab:aa:16:97:b6:7c:cc:ef:4c:ce:8a:14:
         e9:aa:b5:1c:ef:bf:f9:34:f2:e6:31:60:92:a8:5b:76:dc:a1:
         c5:e4:1a:92:6a:db:bc:5b:ea:bc:4c:f8:06:91:5c:a9:c7:d4:
         a8:18:1e:2e:f5:74:8a:02:af:c6:6c:55:8f:a0:06:06:d8:40:
         50:b6:f7:18:a5:05:97:b9:80:35:6a:58:44:85:63:27:22:ed:
         70:b3:7c:ed:52:8c:b7:18:00:71:5c:3c:e5:4e:a7:3b:9d:96:
         b2:02:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:59 2026 by rpki-client